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(54) Biometric time and attendance system with epidermal topographical updating capability 



(57) There is described a biometric time and attend- 
ance apparatus and method for scanning an epidermal 
portion of a human body, generating an epidermal top- 
ographical pattern and transmitting the epidermal topo- 
graphical pattern to a host computer (20) for determining 
access privileges and for updating epidermal topo- 
graphical database. Input to the computer is by means 



of a plurality of terminals (10) which are connected to 
the host computer (20). Each terminal is placed at a lo- 
cation where access control is required. The host com- 
puter (20) includes a processor (30). RAM (40) and 
ROM (50). The host computer is also connected to an 
input unit (70), such as a keyboard, and an output unit 
(80), such as an LCD, 
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Description 

[0001] The present invention relates to time and at- 
tendance devices. More particularly, the present inven- 
tion relates to a biometric time and attendance device 
for scanning a portion of a human epidermis, generating 
an epidermal topographical pattern and transmitting the 
epidermal topographical pattern to a host computer for 
determining access privileges and for updating an epi- 
dermal topographical database. 
[0002] increasingly, security problems are becoming 
a more noticeable part of modern life. Security was once 
primarily the preserve of classified government installa- 
tions, but increasing losses and calamity have forced 
the review of security equipment and procedures for 
government and industry. Property losses and the theft 
of corporate secrets cost industry billions of dollars an- 
nually. Public safety is endangered by the ability of in- 
truders to easily enter secured places, such as aircraft 
and airport buildings, without detection. 
[0003] Accordingly, access control and personnel 
identification are becoming the object of significant ex- 
penditures by organizations seeking to identify employ- 
ees, vendors and others who are to be permitted access 
to secured areas. 

[0004] Typical access control applications include: 
computer centers; radioactive or biological danger are- 
as; controlled experiments; information storage areas; 
airport maintenance and freight areas; drug storage ar- 
eas; apartment houses and office buildings; safe depos- 
it boxes and vaults; and computer terminal entry. 
[0005] Ascertaining the identity of an Individual is a 
common problem for any access control application. 
There are three typically accepted ways of establishing 
a person's identity: (1 ) a personal identification code; (2) 
an encoded card having identification information; or (3) 
examination of a physical characteristic, such as a fin- 
gerprint. Since fingerprints and other epidermal topog- 
raphy are unique to an individual, they provide an ex- 
tremely reliable identification characteristic. Fingerprint 
identification has been used for many years to help 
solve crimes, provide positive identification for security 
and help to identify missing persons. In addition, phys- 
ical characteristics are practical for identification use be- 
cause individuals do not ordinarily object to being so 
identified. 

[0006] Devices are available to electronically scan ep- 
idemDal characteristics and to produce related data sig- 
nals which can be matched to stored images in a real 
time Identification process. For example, U.S. Patent 
No. 4,210,899 discloses a fingerprint-based access 
control and identification apparatus which reads a hu- 
man fingerprint and transmits the electronic represen- 
tation of the fingerprint to a centralized image process- 
ing unit. The processing unit determines whether the in- 
dividual whose fingerprint has been read Is permitted 
access to certain areas at the specific time the finger- 
print is read. 



[0007] U.S. Patent No. 5,559,504 shows a device for 
performing fingerprint identification and continuous up- 
dating of the stored Information. Each time a match is 
made, the device removes the prior data and stores the 
5 latest fingerprint pattern. The next fingerprint identifica- 
tion is performed by using the latest registered identifi- 
cation pattern. Identification information or an identifica- 
tion code is not required to update the fingerprint pattern 
stored In memory. 
10 [0008] U.S. Patent No. 5,337,043 discloses an ac- 
cess control system which uses cards for storing data 
in the form of a barcode. The comparison of an individ- 
ual's fingerprint with a fingerprint representation stored 
in a barcode is made directly at the access control point. 
IS The access control point decision to admit or deny ac- 
cess and a keyholder identifying code are sent in a re- 
port to a host computer. The time of day and the access 
control point location can be added to the report by the 
host computer The system minimizes the contact of the 
intelligent terminal with the host computer rather than 
using a dumb terminal transmitting read data for 
processing by a host computer. 
[0009] Although current systems provide rudimentary 
access control functions, there continues to be a need 
for an inexpensive method of controlling access to spec- 
ified areas, accounting for changes in the epidermal to- 
pography in the data base, and providing a record of 
time and attendance of employees. 
[0010] The present invention provides an epidermal 
topography based access control system which reads a 
portion of the human epidermis (e.g. a fingerprint). The 
system may Include a plurality of terminals connected 
to a remote database storing epidermal topographical 
patterns and authorized access information. Each ter- 
minal scans a predetermined epidermis and generates 
an epidermal topographical pattern which is transmitted 
to a host computing device. The host computing device 
compares the transmitted epidermal topographical pat- 
tern with the stored epidermal topographical patterns. If 
a match is found, the host computer reads the informa- 
tion associated with the stored epidermal topographical 
pattern and determines whether access or egress at the 
current time is permissible. If no match Is found, the ter- 
minal requests an authorization code. If an authorization 
code is entered and followed by a personal identification 
code, the individual seeking access may input a new ep- 
idermal topographical pattern to update the remote da- 
tabase. 

[0011] For added security, each terminal may be 
equipped with a card reader or keypad for reading or 
entering additional identification information associated 
with the epidermal pattern data. 



BRIEF DESCRIPTION OF THE DRAWINGS 

55 

[0012] 

Figure 1 is a block diagram of an embodiment of 
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the present invention having multiple terminals; 

Figure 2 is a diagram of a first embodiment of a 

terminal of the present invention; 

Figures 3A and 3B are diagrams of the steps of 

controlling access utilizing the terminal of the first 

embodiment of the present invention; 

Figure 4 is a block diagram of a front face of a card; 

Figure 5 is a block diagram of a rear face of a card; 

Figure 6 is a diagram of a second embodiment of 

a terminal of the present invention; and 

Figures 7A and 7B are diagrams of the steps of 

controlling access utilizing the second embodiment 

of the terminal of the present invention. 

[0013] The preferred embodiments are described 
with reference to drawing figures wherein like numerals 
represent like elements throughout. 
[0014] Figure 1 shows a possible configuration of a 
multiple terminal biometric time and attendance system 
with epidermal topography updating capability. A plural- 
ity of terminals 10 are connected to a host 20 which in- 
cludes a processor 30, a RAM 40 and a ROM 50. The 
host 20 can be programmed to permit entry and/or 
egress (collectively referred to as access) for certain 
personnel based upon epidermal topographical pat- 
terns and access information. Access information in- 
cludes a list of access control areas and times during 
which an individual is permitted to access an area. For 
example, an individual may be permitted access to con- 
trolled area "x" during the second shift. As such, the ac- 
cess information would include the permitted area(s) 
and the permitted time(s) for that individual. Since the 
access information is under the employer's control, the 
permitted area(s) and time(s) of access can be changed 
easily without the need for the issuance of a new iden- 
tification card to the individual or getting updated access 
information to security personnel for manual verification. 
The host 20 has a data base 60 for storing the individ- 
ual's epidermal topographical patterns and access in- 
formation. The host 20 is connected to an input unit 70, 
such as a keyboard, and an output unit 80, such as a 
liquid crystal display. Each terminal 10 is placed at a lo- 
cation where access control is desired. This system en- 
ables access management for different personnel at dif- 
ferent locations and times of day, or different days of the 
week or calendar days. etc. 

[0015] Figure 2 is a diagram of a first embodiment of 
a terminal of the present invention. The terminal 10 in- 
cludes an epidermal topographical scanner 12, a dis- 
play 14 and a keypad 16. An example of an epidermal 
topographical scanner 12 is a fingerprint scanner. The 
scanner 12 reads a portion of an individual's epidermis 
and generates an epidermal topographical pattern 
which is transmitted to the host 20 for comparison. Dis- 
play 14 may display a final result for the request to gain 
access or prompt the individual for more information. 
[0016] The operational flow of a first embodiment of 
the terminal 10. which is preferably located outside of 



the controlled area, is shown in Figures 3A and SB. After 
the terminal 10 is activated, the program is started (SI) 
and the system is initialized, preferably automatically 
(S2). When an epidermis is detected (S3), the epidermal 
5 topographical scanner 12 scans the epidermis (S4), 
generates a digital epidermal topographical pattern sig- 
nal (S5] and transmits that to the host 20 (86). The host 
20 compares the transmitted pattern with epidermal top- 
ographical patterns stored in the database 60 (S7). 
10 [001 7] If the transmitted epidermal topographical pat- 
tern of an individual wishing to gain access does not 
match one of the stored epidermal topographical pat- 
terns, access is denied (S7A), the host computer stores 
time of the attempt and generates a report (S7B). The 
IS display prompts security personnel to make a personal 
review or investigation of the individual. If it is deter- 
mined that the individual should gain access, the secu- 
rity personnel proceeds to input an authorization code 
(S11). After an authorization code is entered and fol- 
lowed by the individual's personal identification code, 
the individual then places the predetermined epidermis, 
preferably a finger, on the epidermal topographical 
scanner 12 (S12 and SI 3). The epidermis is read and 
a new epidermal topographical pattern is generated 
(S14). The new epidermal topographical pattern is 
transmitted along with the personal identification code 
to the host 20, which stores the new epidermal topo- 
graphical pattern with the personal identification code of 
the individual (SIS and SI 6). Thus, the database 60 is 
updated and the system returns to step S3. If an author- 
ization code is not entered, the system returns to step 
S3. 

[0018] If the transmitted epidermal topographical pat- 
tern matches an epidermal topographical pattern stored 
in the data base 60 and the access informatbn associ- 
ated with the stored epidermal topographical pattern 
permits entry or exit, access is granted (S7, S8 and S9) 
and then the system returns to step S3. If there is a 
match and the access information stored with the epi- 
dermal topographical pattern does not permit entry or 
exit, access is denied (S8 and S10) and the system re- 
turns to step (S3). Each time an Individual is denied 
(S10), the host 20 preferably stores the time of the at- 
tempt and generates a report (SI OA). 
[0019] If desired, the host 20 may store the date and 
time an individual gains admission to or exit from a con- 
trolled area (SSA). A report is then created which indi- 
cates the date, time and identity of the individual (S9B). 
When the same individual exits the controlled area, for 
example, at the end of a shift or for a meal break, the 
individual exits the controlled area by placing the same 
predetermined epidermis on the epidermal topographi- 
cal scanner 12. An individual can exit a controlled area 
by placing the predetermined epidermis on an epider- 
mal topographical scanner 1 2 of another terminal 1 0, for 
example, one located inside the controlled area, that is 
in communication with host 20. Normally, the scanned 
epidermal topographical pattern will match the stored 
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epidermal topographical pattern (S7) and the host 20 
would note and store the time of the event (S9A). The 
generated report (S9B) should reflect the date, time and 
location the individual exited the controlled area. In the 
event the individual damaged the stored epidermis pat- 
tern while In the controlled area, the host 20 stores the 
time and date of attempted exit (S7A) and generates a 
report (S7B). An authorization code (S1 1) may be input 
by security personnel to permit the individual's depar- 
ture from the controlled area. The authorization code al- 
so permits the individual to submit a new epidermal top- 
ographical pattern to update the database (S13-S16). 
The host 20 preferably uses the above dates, times and 
locations of entry and exit, over a period of time, such 
as a week, to generate management and payroll re- 
ports. 

[0020] Figures 4 and 5 show an example of a card 
90, which Is read by a terminal 100 in a second embod- 
iment of the present invention. In order to access a con- 
trolled area, an individual is required to present a card 
90 having at least one machine readable medium. Fig- 
ure 4 shows the front face of a card 90 having a photo- 
graph 92 and a visible machine readable code 94. The 
card 90 may also contain personal identification infor- 
mation such as the bearer's name, eye color, etc. The 
same personal identification information may be encod- 
ed in the visible machine readable code 94. Figure 5 
shows the rear face of the card 90 which includes mag- 
netic stripe 96. Personal identification information from 
the front face of the card 90 is also preferably encoded 
on the magnetic stripe 96. Non-visible information may 
also be encoded on the magnetic stripe 96. 
[0021] Referring to Figure 6, a block diagram of a sec- 
ond embodiment of the present invention is shown. A 
terminal 100 is substituted for the terminal 10 in Figure 
1 . In addition to the epidermal topographical scanner 1 2, 
display 14 and keypad 16, the terminal 100 includes a 
card reader 105 for reading either visible machine read- 
able code 94 or encoded data on the magnetic stripe 
96. The reader 1 05 may also be configured to read both 
94 and 96. The scanner 12 reads a portion of an indi- 
vidual's epidermis, preferably a fingerprint, and gener- 
ates an epidermal topographical pattern. Operation of 
the alternative embodiment of the present invention is 
shown in the flowchart of Figures 7A and 7B After the 
terminal 100 is activated, the program is started (SI) 
and the system is initialized, preferably automatically 
(S2). The card 90 is inserted into, or scanned by. card 
reader 105 (S3). The card 90 Is read to obtain the iden- 
tification information encoded thereon (S4). For added 
security, the individual may be prompted to input a per- 
sonal identification code (S5). The display prompts the 
person seeking access to place a predetermined epi- 
dermis, such as a finger, on the epidermal topographical 
scanner 1 2 (S6). The epidermis Is placed on the scanner 
(S7), the epidermis is scanned and an epidermal topo- 
graphical pattern is generated (S8). The identification 
information, along with the identification code, and epi- 



dermal topographical pattern are transmitted to the host 
20 (S9). The host 20 compares the transmitted informa- 
tion with the information in the database (S10). 
[0022] If the transmitted infomiation of the individual 
5 seeking access does not match (SI OA), the terminal 
100 stores the time of attempted entry or exit. The dis- 
play 14 prompts security personnel to make a personal 
review or Investigation of the individual. A display 14 re- 
quests a security or authorization code (SI 4). If it is de- 
10 termined that the individual should gain access, the se- 
curity guard or other authorized person enters a security 
code or authorization code (SI 5). If an authorization 
code is entered and followed by the individual's personal 
identification code, the individual places the predeter- 
is mined epidermis on the epidermal topographical scan- 
ner 12 (SI 6). which reads the epidermis and generates 
an epidermal topographical pattern (SI 7). This pattern 
is transmitted along with the personal identification code 
to the host (SI 8). The host then replaces the old epider- 
mal topographical pattern with the transmitted epider- 
mal topographical pattern in the data base 60 (819). The 
system then returns to step (S3) so that the individual 
can obtain access to or egress from the controlled area 
by repeating steps (S3-S10). If an authorization code is 
not entered, the system returns to step S3. 
[0023] If the associated access information does not 
permit access at the current date and time (S1 1 ), access 
is denied (SI 3) and the system returns to step (S3). 
Each time access is denied (SI 3), the host 20 preferably 
stores the time of the attempt and generates a report 
(SI 3 A). Then, the system returns to step (S3). 
[0024] If the transmitted information matches and the 
associated access information indicates that access is 
permitted (S11), access is granted (S12) and the system 
returns to step S3, If desired, host 20 may store the date 
and time an individual gains admission to or exits from 
a controlled area (SI 2 A). A report is then created which 
indicates the date, time of entry and Identity of the indi- 
vidual (S12B). When the same individual exits the con- 
trolled area, for example, at the end of a shift or for a 
meal break, the individual must place the predetermined 
epidermis on the epidermal topographical scanner 12. 
Alternatively, the individual can place the predetermined 
epidermis on another epidermal topographical scanner 
12 inside the controlled area. If the scanned epidermal 
topographical pattern matches the stored epidermal 
topographical pattern (S10), the host 20 would note and 
store the time of exit (S12A). The generated report 
(SI 28) should reflect the date, time and location of the 
individual's exit from the controlled area. In the event 
the individual damaged the recorded epidermis while in 
the controlled area, the epidermis will not match the re- 
corded epidermis (SI OA). The host 20 preferably stores 
this event. However, an authorization code (SI 4 and 
SI 5) may be input by security personnel to permit the 
individual to exit and record that departure from the con- 
trolled area. The authorization code also permits the in- 
dividual to submit a new epidermal topographical pat- 
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tern to update the database (S16-S19). Over a period 
of time such as a week, the host 20 uses this information 
to generate management and payroll reports. 

Claims 

1. An apparatus for controlling personnel movement 
in a controlled area, the apparatus comprising: 

a host computing device; 
a database operatlvely associated with the host 
for recording information for a plurality of indi- 
viduals, each individual record having associ- 
ated therewith an individual's predetennined 
epidermal topographical pattern and personal 
identification data; 

a plurality of data collection terminals in com- 
munication with the host wherein at least one 
of the terminals includes a scanner means for 
inputting to the host an epidermal topographical 
pattern for a presented individual in a format 
suitable for comparison with the stored epider- 
mal topographical pattem records; and 
means for indicating the result of the compari- 
son. 

2. An apparatus as in claim 1 wherein at least one ter- 
minal further comprises means for inputting an au- 
thorization code and a personal identification code. 

3. An apparatus as in claim 2 wherein said inputting 
means includes a keypad for inputting the authori- 
zation code. 

4. An apparatus as In claim 2 further comprising 
means for replacing the stored epidermal topo- 
graphical pattem with a new epidermal topograph- 
ical pattern. 

5. An apparatus as in claim 1 further comprising a 
means for reading identification information in a ma- 
chine readable format. 

6. An apparatus as in claim 1 further comprising: 

means for prompting an attendant to make a 
human evaluation of the presenter. 

7. An apparatus as in claim 1 further comprising: 

means for changing the recorded information 
for an indivkJual and associating that changed infor- 
mation with the individual's predetermined epider- 
mal topographical pattem. 



a database operatlvely associated with the host 

for recording access information for a plurality 
of individuals, each individual record having as- 
sociated therewith an individual's predeter- 
s mined epidermal topographical pattern, identi- 

fication information and a persona! identifica- 
tion code; and 

a plurality of data collection terminals in com- 
munication with the host wherein at least one 

^0 of the terminals includes a means for inputting 

to the host a personal identification code, iden- 
tification information and epidermal topograph- 
ical information for a presented individual In a 
format suitable for comparison with the stored 

^5 access information. 

9. An apparatus as in claim 8 wherein at least one ter- 
minal further comprises means for Inputting a new 
epidermal topographical pattern upon receipt of an 

20 authorization code. 

10. An apparatus as in' claim 9 wherein said inputting 
means includes means for replacing the stored ep- 
idermal topographical pattem with the new epider- 

2S mal topographical pattern in the database. 

11. An apparatus as in claim 9 wherein said inputting 
means includes a keypad for inputting the authori- 
zation code and personal identification code. 

30 

12. An apparatus as in claim 8 wherein said inputting 
means includes an epidermal topographical scan- 
ner, and means for generating a digital epidermal 
topographical pattern. 

35 

13. An apparatus as in claim 8 further comprising: 

means for transmitting said epidermal topo- 
graphical information, identification information 
"^0 and personal identification code to said host 

computing device; and 

means for granting access to or egress from 
said controlled area when said stored epider- 
mal topographical pattem, identification infor- 
ms mation and personal identification code match- 
es said transmitted epidermal topographical in- 
formation, identification information and per- 
sonal identification code, and said access infor- 
mation indicates that access or egress is per- 
50 mitted. 

14. A method for controlling personnel movement in a 
controlled area comprising: 
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8. An apparatus for controlling personnel movement ss providing a host computing device; 

In a controlled area comprising: providing a database of recorded access infor- 

mation for a plurality of individuals that is oper- 
a host computing device; atively associated with the host, each individual 
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record containing at least an epidermal topo- 
graphical pattern associated with a given indi- 
vidual; 

providing an epidermal topographical scanner 
for scanning a predetermined epidermis of a 5 
presented individual; 

means for generating an epidermal topograph- 
ical pattern based upon the scanning and trans- 
mitting that pattern to the host; 
means for comparing the transmitted pattern of 10 
the presented individual with the recorded ac- 
cess information to determine whether the pre- 
sented individual should have access to the 
controlled area; and 

means for indicating the result of the compari- 
son. 

15. The method of claim 1 4 further comprising: 

providing a means for inputting an authorization 20 
code to the host; 

providing a means for inputting a personal iden- 
tification code to the host; 
providing a means for comparing the authori- 
zation and personal identification codes to the 25 
recorded access information; and 
providing a means for modifying the recorded 
access information based upon a favorable 
comparison of the authorization and personal 
identification codes with the recorded access 30 
information. 
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